Overview

The Connector is a dial-out connector that establishes a secure tunnel with the Global Edge Network. The Connector can be deployed in any location that has connectivity to your internal services. Each Connector only connects outbound and does not need any inbound open ports to operate correctly.

Note that when a Connector is used, traffic flows from entities on the internet to the Global Edge Network (where your organization’s managed Access Tiers reside), and then through the Connector to the internal service.

Network Configuration

The Connector requires some minimal network configuration.

1. The Connector needs to be able to connect outbound to the internet; it does not need any inbound open ports to operate correctly.

2. Ensure that the Connector server can make an outbound HTTPS connection via port 443 to the Command Center. The Connector does this to register itself and receive its configuration parameters, by making API calls to https://{ccname}.console.banyanops.com/api/v1/….

3. Ensure that the Connector can make an outbound UDP connection to the Global Edge Network. The Connector will pick a port(s) in the range 40000 - 44000 to set up WireGuard tunnels with the Edge Network.

4. Ensure your networking policies allow traffic to flow from the Connector server to backend machines running the applications and services you need to secure access to.

Connector Sizing

SonicWall recommends starting with 1 vCPU and then monitoring the throughput. If, for example, a 10 Gig link needs to be saturated, then increase vCPUs by a power of 2 (e.g., 1 vCPU, 2 vCPU, 4 vCPU), monitoring the throughput with each additional vCPU.

To monitor vCPU utilization, admins can check AWS cloud monitoring or the Connector instance itself (using the top command).

Download

Download the latest Connector version here.

Supported OSs and Platforms

The Connector can be installed using the following install methods on these operating systems and platforms:

Logs Locations for Troubleshooting

Sections